I’m pleased to announce the release of Spring Security OAuth Boot 2 Auto-config 2.0.0.

This project is intended to be used to help users transition between the old Spring Security OAuth 2.x support and the Next Generation OAuth 2.0 Support in Spring Security 5. It provides users of Spring Security OAuth 2.x the same auto-configuration capabilities in a Spring Boot 2.0 based application that is currently available in Spring Boot 1.5.x. For more details please refer to the documentation.

GitHub | Reference | Help

This week, the software world found out that SAML Vulnerabilities Affecting Multiple Implementations were discovered. If you use Spring Security SAML’s defaults, you are not impacted by this vulnerability.

The underlying implementation that Spring Security SAML uses is Shibboleth’s OpenSAML Java library. The OpenSAML Java implementation was not listed in the libraries that contain the vulnerability (Shibboleth openSAML C++ was vulnerable). However, if the ParserPool has been customized, you may be impacted.

NOT Safe Configurations

Specifically, if the application explicitly sets the BasicParserPool or the StaticBasicParserPool to have ignoreComments = false, it is vulnerable to the…

This post was authored by Vedran Pavić

On behalf of the community I’m pleased to announce the release of Spring Session BOM Apple-SR1. With the changes to Spring Session modules described in 2.0.0.RELEASE announcement, the addition of bill of materials (BOM) module was a logical next step.

Note

The originally released Apple-RELEASE contained a glitch in published BOM so make sure you use Apple-SR1.

The BOM provides dependency management for Spring Session core modules (which include Data Redis, Hazelcast and JDBC) and Spring Session Data MongoDB. The following table provides an overview of all…

On behalf of the team, it is my very great pleasure to announce that Spring Boot 2.0 is now generally available as 2.0.0.RELEASE from repo.spring.io and Maven Central!

This release is the culmination of 17 months work and over 6800 commits by 215 different individuals. A massive thank you to everyone that has contributed, and to all the early adopters that have been providing vital feedback on the milestones.

This is the first major revision of Spring Boot since 1.0 was released almost 4 years ago. It's also the first GA version of Spring Boot that provides support for Spring Framework 5.0.

…

On behalf of the whole Reactor Team, it is my pleasure to announce that the Reactor BISMUTH-SR7 release train is now available. As always, we recommend using the reactor-bom Bill Of Material.

In time for Spring Boot 2, this release train comes with improvements and bugfixes to core, extras, and reactor-netty.

This blog post highlights the most significant changes in both SR7 and last week’s SR6 release trains.

Reactor-Core 3.1.5

What’s new since 3.1.3? See the full release notes of the 3.1.4.RELEASE and the 3.1.5.RELEASE. Core changes include more than 15 improvements and bugfixes.

A few new operators have landed in this release: For example, mergeOrdered has been added to Flux and ParallelFlux. It lets you merge multiple sources by continuously picking the smallest available value among all the sources, as defined by a provided Comparator…

I’m pleased to announce the release of Spring Security 5.0.3.

The main purpose of this release is to provide a significant performance improvement for Spring Security WebFlux. It also contains dependency updates to prepare for Spring Boot 2.0.0.RELEASE. For a complete list of changes, refer to the changelog.

Project Site | Reference | Help

On behalf of the Spring Data team, I'd like to announce the fifth service release of the Kay release train in prospect of Spring Boot 2.0 GA.

This service release ships with 23 tickets fixed. Kay SR5 will be picked up by Spring Boot 2.0 GA for your convenience and is a strongly recommended upgrade to users of the Kay release train.

You can find all details within the linked changelogs.

• Spring Data Commons 2.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data JPA 2.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Cassandra 2.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data KeyValue 2.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Solr 3.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Gemfire 2.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Neo4j 5.0.5 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data MongoDB 2.0.5 - Artifacts - JavaDocs - Documentation - …

Hi Spring fans and welcome to another installment of Spring Tips! This is a super exciting week! Spring Boot 2.0 is coming! Keep your eyes on the Spring Initializr or you'll miss it! :D

Today I was at the Okta Iterate conference talking to developers who are using Spring and Okta, thanks to my buddy Matt Raible. High point? I got to meet Jeff Atwood, the co-creator of Stack Overflow!

Tomorrow, I begin a whirlwind tour over the next two weeks. First, it's off to Glasgow, Scotland; then Sydney, Australia; then Dubai; then Bangalore, India (for Agile India 2018); and then it's off to Boston, Massachusetts for the SpringOne Tour event on March 13th. If you're in any of those places, don't hesitate to reach out…

On behalf of the community, I am pleased to announce that the Milestone 7 (M7) of the Spring Cloud Finchley Release Train is available today. The release can be found in Spring Milestone repository. This release is compatible with Spring Boot 2.0.0.RC2. You can check out the Finchley release notes for more information.

Notable Changes in the Finchley Release Train

Spring Cloud Netflix

• All of the code releated to Feign has been moved to a separate project, Spring Cloud OpenFeign.
• There is a known issue with the Hystrix Webflux endpoint when using Spring Boot 2.0.0.RC2. You can follow this issue in Reactor for more information.
…